Abstract The Internet of Things (IoT) is a crucial technology in the healthcare industry thanks to recent developments in automated data collection. Current statistics of the healthcare sector show that it is expanding at a remarkable rate. However, the performance of the healthcare system is impacted by many challenges, such as security, privacy, latency, scalability, and heterogeneity that come with advancement. Fog computing and software‐defined networks (SDN) are critical enabling technologies that help to improve IoT‐based healthcare systems by ensuring timely and reliable data provisioning for use in healthcare applications. SDN solves interoperability, device management, and network management issues and automates patient health monitoring without human interaction. SDN and fog computing in IoT‐based healthcare can optimize device communication and computing power at a low cost. SDN‐enabled fog computing has lower latency and better security than cloud‐based IoT healthcare architecture. The researchers have not entirely discovered SDN‐enabled fog computing to the best of our knowledge. This paper covers healthcare IoT technicalities and related technologies. We examined ways to merge SDN, fog computing, and IoT to improve healthcare solutions. Finally, we concluded the paper with research issues and future healthcare system improvements.

Abstract In recent years, many lightweight block ciphers were proposed to provide security for resource‐constrained environments such as Internet of Things (IoT). PIPO, which stands for “plug‐in plug‐out”, is just a lightweight bit‐sliced block cipher offering excellent performance in 8‐bit AVR software implementations. In fact, PIPO owns 64‐bit input and output, 128‐bit secret key. In this article, we consider the differential fault analysis (DFA), a typical side‐channel attack, on the PIPO cipher. More concretely, for the first time, we apply the mixed attack model, which considers the DFA on the encryption state and key schedule simultaneously, to recover PIPO's 128‐bit master key. The theoretical analysis shows that, in average, after injecting 4‐byte faults, the complexity of obtaining the master key reduces from 2128 reduces to 214. In fact, this attack model alleviates the assumption on attacker than the bit‐injection case. It should be noted that our analysis also holds for other bit‐sliced block ciphers. Finally, the simulations show that our proposed DFA on PIPO cipher is rather practical.

Abstract Parallel to the increasing use of smart speakers (aka virtual assistants), privacy concerns emerge. In this article, we provide a systematic review of the literature on privacy issues in smart speakers. Both Scopus and Web of Science databases are examined, as well as the preprint repository arXiv, to take into account the most recent contributions. That literature exhibits a continuously growing trend in the last 4 years, with the USA being the single largest contributor to the field. The topics debated in the literature concern the perception of privacy issues, their contribution to adoption choices, the identification of vulnerabilities, the proposal of possible countermeasures, and (last and least) the analysis of the legal cases that are arising.

Abstract Singcryption is a very important concept to bind confidentiality and authenticity. This is a logical step to reduce both computation and communication costs. The proposed an identity based signcryption that removes the overhead of certificates. The proposed design is provably secure in the standard model (a widely accepted model). Furthermore, the IBSC design uses modified bilinear Diffie‐Hellman inversion and modified strong bilinear Diffie‐Hellman assumption as building blocks of the security. The proposed design is secure, efficient, and shortest to the best of our knowledge. In this design, a user does pairing free computation, and he sends only a triplet on the public channel, that makes it efficient in terms of computation and communication costs.

Abstract The internet of things (IoT) is now advancing at a tremendous pace. Devices in the IoT can connect and communicate in a fully autonomous mode. Because of its autonomy and numerous infractions of security policies, the IoT network is subject to various security risks. However, because of this autonomy, dependable security and storage mechanisms for authentication to share data across IoT devices are essential. Furthermore, since it has initially been popularized in Bitcoin, blockchain development has accelerated. Blockchain can be used to solve security challenges in the IoT. Making secure communication between IoT devices is one approach to accomplish this. To address this issue, we present an effective technique for intranetwork and internetwork device‐to‐device secure communication that enables IoT device identification and authentication while also providing secure communication in an open environment. The method also provides data integrity in addition to authentication and secure communication. We have presented informal security analysis, which confirms that there is no important security threats in our protocol. The performance of the protocol is also better in comparison with previously published papers.

Abstract Nowadays, advancements in health technology have characterized modern illness diagnosis methods in the global healthcare system. The World Health Organization (WHO) has received a large number of respiratory disease patients in recent years, resulting in billions of personal health records (PHRs) being created and transmitted via cloud with the aim of taking precautions and restricting the disease. The transmission of PHR through Internet has generated significant security and privacy concerns for the global health care system. Furthermore, the potential change in the patient's health situation at any time needs immediate and secure healthcare access. For robust authentication and optimal confidentiality, it is necessary to reinforce the access control policies. As a result, various security schemes have been developed but lack efficiency while deploying cloud‐based e‐health applications, where the cloud providers are honest but curious and may obtain sensitive data without the consent of users. In this article, we present a new security scheme for e‐health mobile applications based on hybrid cipher text‐policy attribute access control, blockchain, and context‐awareness (Cx‐CP‐ABE). The approach is based on reinforcing security policies pertaining to the continuous evolution of the patient's state and context changes and the improvement of the patient's data confidentiality. The proposed security scheme has been evaluated under various patient contexts, and its performance has been measured in terms of sensitivity, number of health attributes, and execution time.

Abstract Autonomous or robot vehicles are manufactured with such advanced technologies that they are technically able to operate without human intervention. The number of sensors deployed in automated vehicles is increasing, which runs a high risk of the excessive collection and processing of personal data. Considering European Union and Finnish perspectives on robot buses as an instance of advancements of autonomous vehicles, this article briefly outlines the general legal issues related to developing robot buses, and focuses on public interest and legitimate interest as lawful bases for processing personal data in running such vehicles in the mass transportation system.